Photo of David Vance Lucas

David Lucas provides legal strategy for technology and business. He applies legal, technological and operational experience to craft strategic advice on a variety of intellectual property, international trade and complex litigation matters.

New “Basic Assessment” Is a Bridge to CMMC for Defense ContractorsThe Department of Defense (DoD) continues to enhance cybersecurity requirements in its supply chain. A new rule requires some contractors to assign a numerical score to their current cybersecurity practices. Additionally, the rule begins rolling out requirements for all defense contractors to have their cybersecurity certified by a third party.

For years, the gold standard

Schrems II, Part 2 — Additional Guidance for the Transfer of Personal Data Between the EU and U.S.Additional Impacts of the Invalidation of the EU-U.S. Privacy Shield

As previously advised, on July 16, 2020, the Court of Justice of the European Union (CJEU) issued a lengthy and detailed opinion invalidating the EU-U.S. Privacy Shield. The decision required immediate changes in the transfer of “personal data” between the European Union (EU) and

Impacts of the European Union invalidation of the EU-U.S. Privacy Shield

Initial Guidance for the Transfer of Personal Data between the European Union and the United States

On July 16, 2020, the Court of Justice of the European Union (CJEU) issued a very lengthy and detailed opinion invalidating the EU-US Privacy Shield (Decision 2016/1250), thereby requiring an immediate re-assessment of transfers of Personal Data between the European Union (EU) and the